Multiples vulnérabilités dans les produits SonicWall (02 septembre 2026)

unknownknown exploitedpublic exploitCVE-2026-83548 CVE-2026-83549

Actively exploited. At least one CVE in this advisory is listed in the CISA Known Exploited Vulnerabilities catalog — exploitation has been observed in the wild. Treat remediation as urgent.

De multiples vulnérabilités ont été découvertes dans les produits SonicWall. Elles permettent à un attaquant de provoquer une exécution de code arbitraire à distance et une falsification de requêtes côté serveur (SSRF). L'éditeur indique que les vulnérabilités CVE-2026-83548 et CVE-2026-83549...

CSIRTS triage

vendor: SonicWall Remote code execution Server-side request forgery

What: Multiple vulnerabilities in SonicWall products allow remote code execution and server-side request forgery.
Who is affected: Users of affected SonicWall products are vulnerable.
Urgency: Critical urgency due to remote code execution risk.
Action: Identify affected SonicWall products from the advisory and apply corresponding patches.

AI-assisted analysis generated from the source advisory — verify against the original.

Details

Source: CERT-FR Avis de sécurité (FR · national-cert · site)
Severity: unknown
Published: 2026-09-02
Exploitation: Observed in the wild (CISA KEV)

Original advisory: https://www.cert.ssi.gouv.fr/avis/CERTFR-2026-AVI-1103/

Exploitation outlook

EPSS (FIRST.org) estimates each CVE’s probability of exploitation in the next 30 days — here is the CSIRTS.com read on those numbers.

Exploitation confirmedCVE-2026-83548Already exploited in the wild (CISA KEV) — the prediction phase is over. Patch now. Riskier than 51% of all EPSS-scored CVEs.
Exploitation confirmedCVE-2026-83549Already exploited in the wild (CISA KEV) — the prediction phase is over. Patch now. Riskier than 75% of all EPSS-scored CVEs.

Referenced CVEs

CVE	CSIRTS overview	External
CVE-2026-83548	coverage & exploitation status	NVD · CVE.org
CVE-2026-83549	coverage & exploitation status	NVD · CVE.org

Same CVEs, other sources

How other CERTs, PSIRTs and databases cover the vulnerabilities in this advisory.

unknownexploitedSonicWall security advisory (AV26-872) – Update 1cccs
highexploitedCISA Adds Seven Known Exploited Vulnerabilities to Catalogcisa
criticalexploited[NEW] [critical] SonicWall SMA: Multiple vulnerabilitiescert-bund
unknownexploitedNCSC-2026-0337 [1.00] [H/H] Zero-Day kwetsbaarheden verholpen in SMA1000 Appliance van SonicWallncsc-nl
criticalexploitedCVE-2026-83548: SonicWall SMA1000 Appliances Server-Side Request Forgery Vulnerabilitycisa-kev
criticalexploitedCVE-2026-83549: SonicWall SMA1000 Appliances OS Command Injection Vulnerabilitycisa-kev
unknownexploitedMultiples vulnérabilités dans SonicWall Secure Mobile Access (02 septembre 2026)cert-fr-alerte
highexploitedCVE-2026-83549: Post-authentication Improper Neutralization of Special Elements used in an OS Command ('OS Com…nvd
criticalexploitedCVE-2026-83548: A Pre-authentication SSRF vulnerability exists in the SMA1000 Appliance Work Place interface d…nvd

Multiples vulnérabilités dans les produits SonicWall (02 septembre 2026)

CSIRTS triage

Details

Exploitation outlook

Referenced CVEs

Same CVEs, other sources

More from CERT-FR Avis de sécurité